ucbooks.education and its affiliates (collectively "ucbooks", "we" and "us") respect your privacy. We provide academic libraries a service that enables members of their institution to buy, sell or lend books and access library content.

This privacy policy describes the Personal Data we collect through our Platforms (Web, App Store and Play Store), why we collect it, with whom we share it, your rights and choices, and how you may contact us about our privacy practices.

1. Overview.

This document is targeted towards all individual ucbooks users. Please note however that ucbooks is a product made available through your institution.

That means that your institution has an agreement with us that states who can use ucbooks, and what information we process.

We will make clear what Personal Data is collected by us in Section 2. While you may contact us about this, your institution's privacy officer would be a good starting point if you have some concerns.

2. Personal Data We Collect.

Personal Data is any information that tells us something about you or that can be linked to you as a person. For example, when you log in to ucbooks with your institutional account (or otherwise), ucbooks receives your name, email address, preferred language, device type and the institution to which you belong. If you upload a profile picture, this is also considered your Personal Data. Any messages you send to other members, and records of books you have posted or requested or library resources you have accessed in the past become part of your Personal Data as well as they are linked to you as a user.

We use some technologies to record information about your Platform usage. This is used to identify bugs and more generally improve our offering for our users. We obtain:

Browser and device data: Device type, operating system name and version and the language version of the Platform used.

Usage data: Time spent on the Platform (web or app pages), pages visited, links clicked and any language preference.

While most of our logging technology has been built internally, the third party technologies we use for the above purposes include Google Analytics, Fabric, Firebase and Bugsnag.

3. How We Use Personal Data.

To prove the value of our service to your institution in real-time: We share some usage statistics with your institution's library to assess the value of the project. These include; the number and value of books bought and sold, the number and list of library books viewed and the total number of messages exchanged between students and their sending frequency. We do not share the content of any messages. All the details are anonymised and cannot be linked to an individual user of our service.

To deliver our service: Some examples include, authentication, to help a book requestor get in touch with you and vice versa or to help us get in touch with you.

To improve, and keep our service performing: When we detect a problem, like the functionality slowing down, or a crash, we need to investigate what led to it. Log files enable us to do so. Furthermore, analytics on how our service is used help us optimise our product stack.

4. How & To Whom We Disclose Personal Data.

Outside our organization: We provide read only access of some of your Personal Data to the incharge(s) at your institution's library. This is used to help demonstrate the value of the service. The exact data we provide is listed in Section 3 under the subheading "To prove the value of our service to your institution in real-time".

Inside our organization: We abide by the data minimization principle - as stated in the General Data Protection Regulation guidelines - and limit access to what is necessary in relation to the purposes for which the data is processed. An example could include to fix a specific error.

5. Your Rights and Choices.

Where processing of Personal Data is based on previously given consent, you have the right to withdraw your consent at any time.

You have the right to request that we erase all your Personal Data. For your ease, a provision to request for this has been made in the Platform's account settings.

You have the right to request confirmation of whether we process Personal Data about you, and if so, to request a copy of your Personal Data.

You have the right to request that we rectify or update your Personal Data that is inaccurate or outdated.

You have the right that we export to any other party, where technically feasible, your Personal Data that we hold in order for them to provide services to you.

6. Security and Retention.

We store Personal Data no longer than required by law and no longer than required to deliver our service. Retention varies between 72 hours (incase of a user account deletion request) and the duration of the subscription your institution has with ucbooks.

When your organization decides to stop their ucbooks subscription, it has two options to choose from;

a) ucbooks hands over all the data in the organization's subscription and deletes the data.

b) ucbooks deletes the data and confirms this to your organization.

7. Updates To this Privacy Policy and Notifications.

We may change this Privacy Policy from time to time to reflect new services, changes to our Personal Data practices or relevant laws. The "Last updated" legend at the top of the Privacy Policy indicates when this Privacy Policy was last revised.

Any changes are effective when we post the revised Privacy Policy on the Platform. We may provide you with disclosures and alerts regarding the Privacy Policy or Personal Data collected by posting them on our website and, if you are a User, by contacting you via your account email address.